Visonic Powerlink2 Hacked
Moderators: Rene, Willem4ever
Visonic Powerlink2 Hacked
You all know that I recently bought a Visonic Powerlink2 with the reason to conect it to my domoticasystem.
You can see the earlier postings about it here
http://www.domoticaforum.eu/viewtopic.php?f=22&t=5624
Together with Digit (he did most of the work) we mananged to find a way to control the basic Powermax Pro functions via the Powerlink 2
Functions Like Arm Home-Away and Disarm bij sending a HTTP request the Powerlink.
POST .../mobile/login/index/?JsHttpRequest=12982287732070-xml HTTP/1.1
Accept: */*
Accept-Language: nl
Referer: http://xxx.xxx.xxx.200/mobile/login/index/
Content-Type: application/octet-stream
Accept-Encoding: gzip, deflate
User-Agent: blabla
Host: xxx.xxx.xxx.200
Content-Length: 42
Connection: Keep-Alive
Pragma: no-cache
Cookie: PowerLink=077d58c208ef9aaef1fe8d464015d929; mobile=e6efb2eae139ca6fe327b603d6c23e76
login=admin&password=admin&time=1298228773
Look at the username and password being sent to the Powerlink2, unencrypted and no HTTPS possible?
Visonic is not doing a nice job on this one!
Good for us though, soon more on the powerlink protocol and now a way to control the Powermax Pro will be available.
For more details check:
Digits Blog:
blog.hekkers.net/2011/02/21/controlling ... owerlink2/
Bwired Blog:
http://www.bwired.nl/weblog.asp?id=415
You can see the earlier postings about it here
http://www.domoticaforum.eu/viewtopic.php?f=22&t=5624
Together with Digit (he did most of the work) we mananged to find a way to control the basic Powermax Pro functions via the Powerlink 2
Functions Like Arm Home-Away and Disarm bij sending a HTTP request the Powerlink.
POST .../mobile/login/index/?JsHttpRequest=12982287732070-xml HTTP/1.1
Accept: */*
Accept-Language: nl
Referer: http://xxx.xxx.xxx.200/mobile/login/index/
Content-Type: application/octet-stream
Accept-Encoding: gzip, deflate
User-Agent: blabla
Host: xxx.xxx.xxx.200
Content-Length: 42
Connection: Keep-Alive
Pragma: no-cache
Cookie: PowerLink=077d58c208ef9aaef1fe8d464015d929; mobile=e6efb2eae139ca6fe327b603d6c23e76
login=admin&password=admin&time=1298228773
Look at the username and password being sent to the Powerlink2, unencrypted and no HTTPS possible?
Visonic is not doing a nice job on this one!
Good for us though, soon more on the powerlink protocol and now a way to control the Powermax Pro will be available.
For more details check:
Digits Blog:
blog.hekkers.net/2011/02/21/controlling ... owerlink2/
Bwired Blog:
http://www.bwired.nl/weblog.asp?id=415
http://www.bwired.nl Online Home, Domotica, Home Automation. Weblog. http://blog.bwired.nl
Re: Visonic Powerlink2 Hacked
Good to hear! Although I am still struggling with mine to get it up and running.
I do not find it that strange the password is not encrypted. All that basic authentication, typically used to exchange userid and password, does is obviscating the password using base64 encoding which is easily reversable. A problem although is that you can use HTTP instead of HTTPS to access the web interface. Is it possible at all to use HTTPS?
I do not find it that strange the password is not encrypted. All that basic authentication, typically used to exchange userid and password, does is obviscating the password using base64 encoding which is easily reversable. A problem although is that you can use HTTP instead of HTTPS to access the web interface. Is it possible at all to use HTTPS?
Rene.
Re: Visonic Powerlink2 Hacked
Great work guys! That is a nice addition for all the domonauts using this system. *thumbs up*
Re: Visonic Powerlink2 Hacked
You're right, that's why I expected more than nothing from Visonic, cause that's what you get right now. It should have been more, not less.Rene wrote:All that basic authentication does is obviscating the password using base64 encoding which is easily reversable.
Re: Visonic Powerlink2 Hacked
Are you able to access the interface using HTTPS or only plain HTTP?
Rene.
Re: Visonic Powerlink2 Hacked
Yes, you can: (I'm serious)
Re: Visonic Powerlink2 Hacked
Thanks guys, for the interesting developments. I also recently bought powerlink2 and follow this story closely.
Re: Visonic Powerlink2 Hacked
Interesting.
Who (shop) is selling this Visonic Powerlink2 ?
Who (shop) is selling this Visonic Powerlink2 ?
--
Maak nu je eigen video bericht online.
Anyone interested in time travel meet me here last Thursday!!
ıɟ ʇ,uɐɔ noʎ buıɥʇʎuɐ ʇɹɐʇs ɹǝʌǝu
Maak nu je eigen video bericht online.
Anyone interested in time travel meet me here last Thursday!!
ıɟ ʇ,uɐɔ noʎ buıɥʇʎuɐ ʇɹɐʇs ɹǝʌǝu
Re: Visonic Powerlink2 Hacked
See the other Powerlink2 topics for that.
But beware lots of people have trouble with the powerlink2 on a Powermax Pro
Looks like it has something to do with the firmware.
i have a new powermax pro anf works fine with the powerlink
But beware lots of people have trouble with the powerlink2 on a Powermax Pro
Looks like it has something to do with the firmware.
i have a new powermax pro anf works fine with the powerlink
http://www.bwired.nl Online Home, Domotica, Home Automation. Weblog. http://blog.bwired.nl
Re: Visonic Powerlink2 Hacked
Together with Bob, the owner of the webshop, I am trying to solve the problems to get the Powerlink2 up and running on my Powermax Pro. He has some panels were he could not get it up and running also. He is also in contact with Visonic but until now it is not clear what is causing the problems. So if I were you I would wait until at least it is clear why on some panels it is working and on other it is not.
Rene.
Re: Visonic Powerlink2 Hacked
Is there any update on the problems of Powerlink2 in combination with Powermax Pro???
I also have the problem that it does not work.
FT
I also have the problem that it does not work.
FT
Re: Visonic Powerlink2 Hacked
I think my setting is the only one working, must have something to do with firmware.....
Is there a version number somewhere on the Powermax Pro
Is there a version number somewhere on the Powermax Pro
Re: Visonic Powerlink2 Hacked
Hi,
Anyone can tell me what firmware version should I have in order to have powerlink2 work on Powermax Pro?
I'm using the remote programmer software from Visonic.
Thanks,
Yossi.
Anyone can tell me what firmware version should I have in order to have powerlink2 work on Powermax Pro?
I'm using the remote programmer software from Visonic.
Thanks,
Yossi.
Re: Visonic Powerlink2 Hacked
No, even Visonic does not tell or know this, and of the word "Service" they never heard of
Like I told before, Visonic is selling the powerlink2 and does not deliver a manual with it.
Like I told before, Visonic is selling the powerlink2 and does not deliver a manual with it.